Abstract: A method for performing network analysis comprising: receiving telemetry information for a computer network, the telemetry information comprising network device state information for internetworking devices in the computer network and network traffic flow information for data packet flows through the computer network; transforming the telemetry information into a temporal graph that is digitally stored in computer memory; receiving, from a client computing device, a request for network analytics information for the computer network; in response to receiving the request for network analytics information, generating network analytics information for the computer network based on the temporal graph and sending the network analytics information to the client computing device.

Abstract: An encoder obtains an uncompressed video bitstream that includes syntax elements that are to be coded using multi-symbol alphabets such that at least one syntax element of the syntax elements that are to be coded determines a magnitude token level that is at least partially represented by a head part. For each of the at least one syntax element, the encoder encodes the head part using multi-symbol alphabets to include a magnitude token level and end-of-block (EOB) information. The encoder transmits to a decoder an encoded bitstream that includes syntax elements coded with the multi-symbol alphabets.

Abstract: In one embodiment, a first apparatus includes a processor and an interface, wherein the interface is operative to receive a request from a second apparatus to commence a keyed-hash message authentication code (HMAC) computation, the processor is operative to perform a first computation computing a first part of the HMAC computation using a secret key K as input yielding a first value, the interface is operative to send the first value to the second apparatus, the interface is operative to receive a second value from the second apparatus, the second value resulting from the second apparatus processing the first value with at least part of a message M, the processor is operative to perform a second computation based on the second value and the secret key K yielding an HMAC value, and the interface is operative to send the HMAC value to the second apparatus.

Abstract: Heterogeneous capabilities in an overlay fabric may be provided. First, it may be determined that a first link and a second link support a feature. Then the first link and the second link may be traversed with traffic between a host in a first Endpoint Group (EPG) connected to a first leaf switch and a second host in a second EPG connected to a second leaf switch when a topology preference for the feature is indicated for the traffic.

Abstract: In one embodiment, a method for protecting a file is implemented on a computing device and includes: intercepting a file-access request from an application-process for the file; searching a whitelist for a whitelist entry associated with the application-process and a file-type for the file, where the whitelist entry indicates that the application-process is allowed to access files of the file-type, and upon determining according to the searching that the application-process is allowed to perform the file-access request, allowing the application-process to access the file according to the file-access request.

Abstract: Reduce echo level may be provided by scrambling phases of echoes from multiple ports in a Full Duplex (FDX) node. The FDX node may comprise a transmit portion, a receive portion, and a plurality of ports. The transmit portion may comprise a transmit portion transmit port and a plurality of splitters. The receive portion may comprise a receive portion receive port and a plurality of combiners. The plurality of splitters and the plurality of combiners may scramble phases of completed loops from the transmit portion transmit port to the receive portion receive port resulting from reflections from the plurality of ports.

Abstract: In one embodiment, a controller determines a particular compartment of a smart postal box in which a package is to be delivered. The controller associates the particular compartment with an authorized entity. The controller provides the authorized entity access to the particular compartment by aligning rolling doors of the smart postal box with the particular compartment.

Abstract: Embodiments are provided for providing optimal route reflector (ORR) root address assignment to route reflector clients and fast failover capabilities in an autonomous system, including identifying a first node in an autonomous system as a candidate root node of a first routing group, identifying a client node based on a neighbor address used in a first routing protocol, mapping the neighbor address to routing information received from the client node via a second routing protocol, and associating the neighbor address with the first routing group if the routing information includes an identifier of the first routing group. In more specific embodiments, identifying the first node as a candidate root node includes determining the first node and the first routing group are advertised in a first protocol packet, and determining the first node and the second routing group are advertised in a second protocol packet.

Abstract: The present disclosure is directed to a multi-level resource reservation system that obviates one or more of the problems due to limitations and disadvantages of the related art. The multi-level resource reservation system creates, or modifies existing, peer-to-peer protocol(s) to complete a continuous chain of configured ports to support QoS feature(s), e.g., bound latency and guaranteed jitter, for a data flow that traverses an arbitrary sequence of bridges, routers, and virtual links.

Abstract: A device obtains access to an application resource from a remote application server based on an authenticated device identifier. The device sends a request to access the application resource provided by the remote application server. The device receives a first message from the remote application server directing the device to send an authentication message to a device identity server. The authentication message requests an authenticated device identity for the device. The device attaches metadata associated with the device to the authentication message and sends the authentication message with the attached metadata to the device identity server. The device receives the authenticated device identity from the device identity server and sends the authenticated device identity to the remote application. The device obtains access to the application resource from the remote application server based on the authenticated device identity.

Abstract: In one embodiment, a device receives location estimates for a wireless node in a network, each location estimate having an associated timestamp. The device applies hierarchical clustering to the received location estimates and their associated timestamps, to identify locations and points in time in which the wireless node was stationary. The device performs sequence modeling on the identified locations and points in time in which the wireless node was stationary, to form a sequence of locations and associated time periods in which the wireless node was stationary. The device associates the wireless node with a behavioral profile based on the sequence of locations and associated time periods in which the wireless node. The device generates, based in part on the behavioral profile for the wireless node, a predictive model that predicts a location of the wireless node at a particular point in time.

Abstract: A method for generating ad hoc video stream channels is implemented on at least one computing device and includes: receiving a multiplicity of incoming user video feeds, where schedules for the incoming user video feeds are unknown; classifying the multiplicity of incoming user video feeds according to at least a genre; selecting at least one incoming video feed from among the multiplicity of incoming user video feeds for inclusion in at least one video stream channel, where the selecting is according to selection criteria, and the selection criteria are based at least on the classifying; generating at least one outgoing video stream for the at least one video stream channel according to the selecting; and delivering the at least one outgoing video stream to presentation devices.

Abstract: In one embodiment, techniques are shown and described relating to traffic-based inference of influence domains in a network by using learning machines. In particular, in one embodiment, a management device computes a time-based traffic matrix indicating traffic between pairs of transmitter and receiver nodes in a computer network, and also determines a time-based quality parameter for a particular node in the computer network. By correlating the time-based traffic matrix and time-based quality parameter for the particular node, the device may then determine an influence of particular traffic of the traffic matrix on the particular node.

Abstract: The present disclosure discloses a system including a controller and multiple radio heads connected to the controller through communication cables. The controller transmits a synchronization signal to each of the radio heads to synchronize the local clocks in the radio heads to a master clock in the controller. The controller also transmits packets to the radio heads using the communication cables. Each of the radio heads includes a digital-to-analog converter (DAC), an antenna coupled to an output of the DAC, and a deframer coupled to an input of the DAC. For a radio head, upon detecting that a received packet from the controller includes an error, the deframer alters the received packet to maintain the synchronization between the controller and the radio head and transmits the altered packet to the DAC.

Abstract: A first map request message is sent from a source network device to a mapping network device to determine a destination network device associated with a destination endpoint device and a security association between the source network device and the destination network device. A first response message is received at the source network device that includes data indicating a mapping between the destination network device and the destination endpoint device and data indicating a security association between the source network device and the destination network device. The data is stored at the source network device. A second map request message is sent from the source network device to the mapping network device to update the data indicative of the mapping or the security association. A second response message is received at the source network device from the mapping network device.

Abstract: An access point in a wireless network communicates wirelessly with one or more client devices over a channel that includes a plurality of subchannels. Each subchannel corresponds to a distinct frequency chunk with a respective plurality of subcarriers. Radar is detected on a first subchannel. In response, a selection is made between (i) redefining the channel and (ii) puncturing the first subchannel while continuing to use all other subchannels. Puncturing the first subchannel includes muting subcarriers on the first subchannel. Redefining the channel includes removing multiple subchannels from the channel. The selection is based at least in part on one or more factors that provide indications as to whether puncturing would be efficient and/or effective. The access point continues to communicate wirelessly with the one or more client devices in accordance with the selection.

Abstract: A method and system for multi-bridge LAN aggregation is disclosed. The method includes aggregating a plurality of LANs coupling a host to a first and a second intermediate network device. The system includes an intermediate network device. The intermediate network device includes a multi-bridge engine. The multi-bridge engine includes a tunnel engine coupled to a bridge interconnect port and a first physical port.

Abstract: In one aspect, a system for intelligent monitoring of a network device in a monitored environment includes a processor; a memory; and one or more modules stored in the memory and executable by a processor to perform operations including: capture network device application data for monitored application, capture network device resource data, generate model for transmitting performance data with minimum overhead based on captured network device resource data, and transmit data based on the model.

Abstract: In an example, there is disclosed an example of a system and method for plug and play in a controller based network. Aspects of the embodiments are directed to a network switch of a fabric network, the network switch configured to detect a connection of a device to the network switch, the device compliant with a remote integrated services engine (RISE) protocol; receive, from the device, a programming instruction for switching compliant with the RISE protocol; and distribute the programming instruction to one or more other network switches of the fabric network.

Abstract: An apparatus, computer program product, and method relating to radio sensor coverage estimation for wireless network assurance. A network controller estimates a network sensor coverage level for candidate access points (APs), based on potential use of the candidate APs as network sensors to measure at least one key performance indicator (KPI). The controller determines a subset of the candidate APs, based on evaluating candidate APs for suitability as network sensors. The controller estimates a second network sensor coverage level for the subset of candidate APs, based on potential use of the subset of candidate APs as network sensors. The controller determines that the second network sensor coverage level is within a pre-defined threshold of the first network sensor coverage level, and provisions a radio in each AP in the subset of candidate APs as a network sensor to measure at least one KPI.